--- catalina/src/share/org/apache/catalina/deploy/SecurityCollection.java (revision 5176) +++ catalina/src/share/org/apache/catalina/deploy/SecurityCollection.java (revision 5337) @@ -190,10 +190,11 @@ // Bugzilla 34805: add friendly warning. if(pattern.endsWith("*")) { - if (pattern.charAt(pattern.length()-1) != '/') { + // Bugzilla 43079: pattern verification broken + if (pattern.length() < 2 || pattern.charAt(pattern.length()-2) != '/') { if (log.isDebugEnabled()) { log.warn("Suspicious url pattern: \"" + pattern + "\"" + - " - see http://java.sun.com/aboutJava/communityprocess/first/jsr053/servlet23_PFD.pdf" + + " - see http://jcp.org/aboutJava/communityprocess/final/jsr154/index.html" + " section 11.2" ); } }